From acc38c9ebfb5e1b665db8362c7776e83360d95a9 Mon Sep 17 00:00:00 2001
From: Victor Julien <victor@inliniac.net>
Date: Wed, 5 Jan 2011 15:34:54 +0100
Subject: [PATCH] Make sure we don't try to 'verdict' the fake
 PKT_PSEUDO_STREAM_END packets.

---
 src/source-ipfw.c | 5 +++++
 src/source-nfq.c  | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/src/source-ipfw.c b/src/source-ipfw.c
index 89bf932b48..d48791e352 100644
--- a/src/source-ipfw.c
+++ b/src/source-ipfw.c
@@ -539,6 +539,11 @@ TmEcode VerdictIPFW(ThreadVars *tv, Packet *p, void *data, PacketQueue *pq, Pack
 
     SCEnter();
 
+    /* can't verdict a "fake" packet */
+    if (p->flags & PKT_PSEUDO_STREAM_END) {
+        SCReturnInt(TM_ECODE_OK);
+    }
+
     /* This came from NFQ.
      *  if this is a tunnel packet we check if we are ready to verdict
      * already. */
diff --git a/src/source-nfq.c b/src/source-nfq.c
index c9bcde47e7..9e01754136 100644
--- a/src/source-nfq.c
+++ b/src/source-nfq.c
@@ -588,6 +588,11 @@ TmEcode VerdictNFQ(ThreadVars *tv, Packet *p, void *data, PacketQueue *pq, Packe
 
     NFQThreadVars *ntv = (NFQThreadVars *)data;
 
+    /* can't verdict a "fake" packet */
+    if (p->flags & PKT_PSEUDO_STREAM_END) {
+        SCReturnInt(TM_ECODE_OK);
+    }
+
     /* if this is a tunnel packet we check if we are ready to verdict
      * already. */
     if (IS_TUNNEL_PKT(p)) {